recoup-music-video
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard command-line utilities such as ffmpeg and ffprobe, along with the hyperframes CLI, for video assembly and quality inspection. These commands are executed locally on project assets.
- [INDIRECT_PROMPT_INJECTION]: The workflow ingests user-provided audio and lyrics. To mitigate potential injection risks, the instructions mandate that the agent verify transcriptions against the original lyrics and obtain explicit user approval at multiple production gates.
- [EXTERNAL_DOWNLOADS]: The skill references official vendor API endpoints at api.recoupable.dev and the NPM registry for package integrity verification. These are documented as trusted or well-known vendor resources.
- [SAFE]: The skill explicitly prohibits downloading remote code, extracting credentials from existing connections, or installing unreviewed dependencies, prioritizing the use of established host capabilities.
Audit Metadata